Mobile App Privacy Policy

GearUp Exchange

This Privacy Notice outlines our practices regarding the collection, processing, and management of personal information in connection with your use of our rental marketplace platform, associated websites, and mobile applications (collectively referred to as our "Platform"). GearUp Exchange maintains this notice to ensure transparency in our data handling practices and your understanding of your privacy rights.

GearUp Exchange does not currently meet the statutory thresholds for mandatory CCPA/CPRA applicability. We are voluntarily aligning with CCPA/CPRA standards as a best practice to protect our users and future-proof the platform.

Looking for the website privacy policy covering our waitlist and marketing site? See our Website Privacy Policy.

1. Categories of Personal Data We Process

The following table identifies the categories of personal information we collect using the statutory categories defined under California Civil Code §1798.140:

1.1 User-Provided Information

Registration and Authentication Data
When establishing your Platform account, we collect your email address and, where applicable, a password credential. If you register through a third-party authentication provider such as Google, no password is stored by us and your display name may be pre-populated from that provider. Additional profile information such as a display name may be added after registration.

Enhanced Profile Details
Users may voluntarily add a profile photo to their account. Any payment-related identity verification is handled directly by Stripe and is not stored by us.

Financial Transaction Information
All payment processing is handled by Stripe, Inc. We do not store financial account details, card numbers, or billing information — Stripe manages this entirely.

Communication Records
Our systems may capture and store the substance and associated metadata of communications occurring between you and our support team, as well as interactions with other Platform users through our messaging systems.

Research and Feedback Data
Voluntary participation in user research initiatives, satisfaction surveys, or feedback programs may result in the collection of your responses and demographic characteristics.

1.2 Automatically Generated Information

Platform Usage Analytics
Our systems collect general usage data such as booking activities and Platform interactions to operate and improve the service.

Geographic Location Data
Location information may be derived through IP address analysis for approximate positioning, or through direct device location services when explicitly enabled by users. Location sharing preferences remain under user control through device-level privacy settings.

Technical Device Information
We collect technical specifications and identifiers including operating system versions, browser applications and versions, IP addresses, device models and manufacturers, and unique device identifiers for Platform optimization and security purposes.

Digital Tracking Technologies
Our Platform employs cookies and similar tracking mechanisms to enhance user experience and gather usage statistics. Please note that we do not currently respond to "Do Not Track" browser signals. We currently do not sell or share personal information as defined under California law. Accordingly, we do not process opt-out signals, including the Global Privacy Control, as a signal to opt out of sale or sharing. If our practices change, we will update this Privacy Notice and honor applicable opt-out signals.

1.3 Third-Party Data Sources

External Authentication Services
When users choose to authenticate through Google, we may receive profile information and registration details from Google as permitted by Google's privacy policy and your authorization. Users authenticating through Google are subject to Google's Terms of Service and Privacy Policy in addition to this Policy. We encourage you to review Google's privacy practices before using Google Sign-In. The same principle applies to any additional authentication providers we may integrate in the future — your use of those services is governed by their respective terms.

External Data Enhancement
We may supplement user information with demographic data or fraud prevention intelligence obtained from legitimate third-party data sources to improve service quality and security.

2. Data Retention

We retain personal information for as long as necessary to provide Platform services, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account, we will remove your information from public view, though we may retain records as required by law or legitimate business purposes such as tax compliance, dispute resolution, and fraud prevention. You may request deletion of your personal information at any time, subject to the exceptions described in the User Rights section.

3. Purposes and Legal Bases for Data Processing

We process personal information to accomplish the following objectives:

Core Platform Operations
Maintaining, operating, and continuously improving our Platform functionality, user interface, and service reliability.

Transaction Facilitation
Enabling and supporting rental transactions, booking confirmations, and inter-user communications necessary for successful equipment sharing arrangements.

Communication and Support
Delivering Platform updates, transactional notifications, customer support responses, and service-related communications.

Innovation and Development
Conducting user research, analyzing Platform performance, and developing new features or service enhancements based on user behavior and feedback.

Security and Fraud Prevention
Detecting, investigating, and preventing fraudulent activities, security breaches, and other harmful behaviors that could compromise Platform integrity or user safety.

Legal and Regulatory Compliance
Meeting our obligations under applicable laws, regulations, and legal processes.

Marketing and Promotional Activities
We do not currently send marketing communications to users.

4. Data Sharing and Disclosure Practices

Consensual Information Sharing
We share personal information when users provide explicit direction or consent for such sharing.

Public Information Display
Certain profile elements and equipment listing details appear in publicly accessible areas of our Platform and may be indexed by search engines.

Inter-User Communication
Confirmed booking arrangements make each party's first name visible to the other. All coordination occurs through the Platform's in-app messaging system. No contact information such as email or phone number is shared between users.

Third-Party Service Providers
We engage qualified service providers for essential business functions including cloud hosting services, payment processing systems, analytics platforms, and customer support infrastructure.

Professional Advisory Services
We may share information with legal counsel, financial advisors, and other professional service providers as necessary for business operations and compliance.

Corporate Transactions
In the event of business mergers, acquisitions, asset sales, or similar corporate transactions, personal information may be transferred as part of the business assets involved.

Legal Obligations and Safety
We disclose information when required by applicable laws, legal processes, regulatory investigations, or when necessary to protect the rights, property, and safety of our users, Platform, or the general public.

Sale and Sharing of Personal Information
We do not sell personal information to third parties for monetary consideration. We do not share personal information for cross-context behavioral advertising purposes. If either of these practices changes, we will update this Privacy Notice prior to doing so.

5. User Rights and Control Mechanisms

Information Access and Modification
Users may review, update, or correct their personal information through Platform account settings or by contacting our support team directly.

Account Closure and Data Deletion
Account deletion requests may be submitted to support@thegearupexchange.com. While we honor such requests, certain information may be retained as required by legal obligations or legitimate business interests.

Communication Preferences
Users can control notifications through their mobile device's system settings.

Advertising and Tracking Controls
We do not currently run targeted advertising campaigns. If this changes, we will update this policy and users will be able to limit targeted advertising through browser settings, industry opt-out mechanisms, or device-level advertising controls.

Location Data Management
Geographic location sharing can be disabled through device privacy settings, though this may impact certain Platform features.

6. Data Security Measures

We implement comprehensive technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. While we maintain industry-standard security practices, no system can guarantee absolute protection against all potential threats.

7. Age Restrictions and Minor Protection

Our Platform is designed exclusively for users aged 18 and older. We do not knowingly collect personal information from individuals under 18 years of age. Discovery of underage user information results in prompt account termination and data deletion.

8. California Consumer Privacy Rights

California residents have the following rights regarding their personal information:

Right to Know
You have the right to know what categories of personal information we collect, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.

Right to Access
You have the right to request access to the specific pieces of personal information we maintain about you.

Right to Correct
You have the right to request correction of inaccurate personal information we hold about you.

Right to Delete
You have the right to request deletion of personal information we have collected from you, subject to certain legal and operational exceptions.

Right to Opt-Out of Sale or Sharing
You have the right to opt out of the sale or sharing of your personal information. We do not sell or share personal information as described in the Data Sharing and Disclosure Practices section above.

Right to Limit Use of Sensitive Personal Information
You have the right to direct us to limit our use of sensitive personal information — including precise geolocation — to only what is necessary to provide the Platform service.

Right to Non-Discrimination
Exercising any of your privacy rights will not result in denial of service, different pricing, reduced functionality, or any other discriminatory treatment.

8.1 Exercising Your Rights

California residents may exercise these rights through either of the following methods:

• Email: support@thegearupexchange.com
• In-App Form: Use the "Contact Support" feature within the GearUp Exchange mobile application

Identity verification may be required, potentially including government-issued identification documentation.

We will respond to verified requests within 45 days. If we require additional time, we will notify you of the extension and the reason within the initial 45-day period.

You may also designate an authorized agent to submit requests on your behalf. We will require either a signed written permission from you or documentation demonstrating legal authority before honoring requests submitted by an agent.

9. Policy Updates and Modifications

This Privacy Notice may be updated periodically to reflect changes in our practices, legal requirements, or Platform features. Updates become effective upon posting, and continued Platform use constitutes acceptance of revised terms.

10. Contact Information and Privacy Inquiries

Questions, concerns, or requests regarding this Privacy Notice or our data handling practices should be directed to:

support@thegearupexchange.com

Our team is committed to addressing privacy-related inquiries promptly and thoroughly.